Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: DqES9O/4PCQXEkayZVgQgpTWBt73vbj/s4rModxftfs=
Subject key identifier: B9:73:44:66:59:04:2D:E8:FC:00:5B:29:05:D6:5E:4F:34:E3:DE:E5
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01A106930D8E309F6D0E2D3624774D07162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0956
Signing time: Sun 04 Oct 2026 11:01:02 +0000
Manifest this update: Sun 04 Oct 2026 11:01:02 +0000
Manifest next update: Mon 05 Oct 2026 11:01:02 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: P0PWIkCq9CIcihD6oyL619k6aIaUGeB2NEjh4p1gLCo=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:0d:8e:30:9f:6d:0e:2d:36:24:77:4d:07:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Oct 4 11:01:02 2026 GMT
Not After : Oct 5 11:01:02 2026 GMT
Subject: CN=b973446659042de8fc005b2905d65e4f34e3dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:5d:e8:a9:f0:8b:93:e2:26:9d:04:88:db:
03:7f:49:1b:d4:7d:dd:34:87:c6:61:31:56:43:a4:
08:15:18:ab:32:89:94:a1:42:58:c5:0b:7f:4b:50:
12:c8:16:88:86:4a:e0:05:37:79:cc:7a:02:67:9b:
87:74:6a:21:7a:dd:fe:45:c3:c1:2f:58:d7:cd:4b:
ae:e1:e4:86:e3:24:a7:07:0d:14:59:11:a1:48:2b:
f2:e7:5f:fe:ca:64:6c:c0:b0:3b:e4:d7:7a:3c:5e:
1a:c6:cb:96:06:47:3e:6b:6c:c5:be:f6:4c:8b:04:
26:bc:2d:8f:bd:e9:09:85:2e:00:1a:c9:36:71:1f:
32:f1:9e:cb:38:95:20:a6:82:aa:ff:7f:29:70:39:
b6:e3:a8:6b:a8:77:67:b7:17:94:02:16:5f:f3:e8:
45:66:8c:03:0c:eb:86:30:43:2e:38:e4:15:50:55:
d7:fe:05:29:ad:a1:06:74:25:c0:34:82:d3:a3:06:
28:3e:e5:dd:11:cf:bd:c1:4b:5f:09:12:ca:4e:42:
9a:ec:bf:7a:2b:55:61:6f:c6:e9:7b:95:97:b8:1c:
13:0c:85:58:d3:ea:ba:f2:1a:e3:ab:f0:8c:9c:76:
dd:87:2d:bc:1e:68:2d:67:b4:f5:60:bf:88:29:9b:
8b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:44:66:59:04:2D:E8:FC:00:5B:29:05:D6:5E:4F:34:E3:DE:E5
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:22:6b:c9:51:10:ae:62:75:8a:2a:ab:98:90:e7:fb:c0:
0a:3e:10:a2:9b:87:57:ac:4e:f5:bb:32:cd:0b:73:54:cd:3e:
93:a9:11:7a:c2:57:ed:3c:fa:f0:5b:15:b8:78:32:62:b5:6b:
23:83:43:63:e0:a8:8c:15:e9:85:da:ec:79:be:f6:96:11:50:
5f:c3:a7:4d:fb:03:ec:4f:1f:7d:19:32:a9:a8:d5:aa:98:4f:
33:27:f2:94:f4:57:52:bb:62:10:c7:19:ea:e4:2c:2b:82:5a:
d3:9f:0b:26:4b:cf:fc:5b:c2:13:b5:ed:dd:66:b7:ae:40:d1:
9d:63:ba:fb:65:4c:15:39:33:78:b4:e1:e0:34:dc:da:97:10:
de:65:0c:18:f8:82:e2:74:2b:df:3a:59:df:50:e5:f1:7a:97:
5e:15:44:53:5d:ff:49:d3:b8:05:91:c5:76:dc:b3:63:0b:09:
cb:c7:fa:28:8b:29:84:86:9d:82:df:42:be:55:3d:3f:e5:af:
4d:de:da:6e:1b:0f:48:da:39:c7:4d:bd:a8:2b:80:5d:44:b3:
6f:f5:ad:1e:6e:bf:54:a2:52:d8:48:e3:e7:7f:99:15:df:0e:
2c:cb:3b:b6:23:44:8e:68:3b:c1:41:c8:4e:b7:56:d1:c9:e1:
e7:f4:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:44 2026 by rpki-client